Skip to content

fix(utils): handle sanitizing multi-level relative paths#10640

Merged
glowcloud merged 4 commits intomasterfrom
fix/sanitize-url-relative-paths
Nov 19, 2025
Merged

fix(utils): handle sanitizing multi-level relative paths#10640
glowcloud merged 4 commits intomasterfrom
fix/sanitize-url-relative-paths

Conversation

@glowcloud
Copy link
Copy Markdown
Contributor

@glowcloud glowcloud commented Nov 18, 2025

Addresses handling of multi-level relative paths. Previously sanitizing URLs took into account only the base-level cases, e.g. ../test but not the multi-level ones, e.g. ../../test.

Fixes #4107
Supersedes #10603

@glowcloud glowcloud changed the title fix(core): handle sanitizing multi-level relative paths fix(utils): handle sanitizing multi-level relative paths Nov 18, 2025
@glowcloud glowcloud merged commit 58aff59 into master Nov 19, 2025
8 checks passed
@glowcloud glowcloud deleted the fix/sanitize-url-relative-paths branch November 19, 2025 13:00
swagger-bot pushed a commit that referenced this pull request Nov 25, 2025
## [5.30.3](v5.30.2...v5.30.3) (2025-11-25)

### Bug Fixes

* **deps:** update vulnerable @release-it/conventional-changelog to 10.0.2 ([#10645](#10645)) ([6acfc6e](6acfc6e))
* **deps:** update vulnerable dependencies (js-yaml & glob) ([#10644](#10644)) ([03cf01b](03cf01b))
* **utils:** handle sanitizing multi-level relative paths ([#10640](#10640)) ([58aff59](58aff59)), closes [#4107](#4107)
@swagger-bot
Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 5.30.3 🎉

The release is available on:

Your semantic-release bot 📦🚀

delendik-testops pushed a commit to ModiusOpenData/swagger-ui that referenced this pull request Mar 3, 2026
…#10640)

Fixes swagger-api#4107

---------

Co-authored-by: David Vogel <david.vogel@siemens.com>
delendik-testops pushed a commit to ModiusOpenData/swagger-ui that referenced this pull request Mar 3, 2026
## [5.30.3](swagger-api/swagger-ui@v5.30.2...v5.30.3) (2025-11-25)

### Bug Fixes

* **deps:** update vulnerable @release-it/conventional-changelog to 10.0.2 ([swagger-api#10645](swagger-api#10645)) ([6acfc6e](swagger-api@6acfc6e))
* **deps:** update vulnerable dependencies (js-yaml & glob) ([swagger-api#10644](swagger-api#10644)) ([03cf01b](swagger-api@03cf01b))
* **utils:** handle sanitizing multi-level relative paths ([swagger-api#10640](swagger-api#10640)) ([58aff59](swagger-api@58aff59)), closes [swagger-api#4107](swagger-api#4107)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Spec hyperlink broken with relative spec URL

3 participants